[Contents] [Index]

About This Document >>     Installing SSH Tectia Server >>     Getting Started >>         Location of Installed Files >>         Starting and Stopping the Server >>         Operation of the Server >>         SSH Tectia Server (T) >>         SSH Tectia Server (A) >>             Privileged Users             Restricting Connections             Logging             Verifying Configuration         SSH Tectia Client >>         Examples of Use     Configuration >>     Authentication >>     Application Tunneling >>     Troubleshooting >>     Man Pages     Advanced Options >>     Log Messages >>

Restricting Connections

SSH Tectia Server can be configured to reject connection attempts from unknown hosts. For example the following allows connections only from the internal network 10.1.0.0/8 IP addresses and from an external host with the IP address 195.20.116.1:

AllowHosts \i10\.1\..*,\i195\.20\.116\.1

Please see Section Restricting User Logins for information on the regular expression syntax and for more configuration examples and options.

On systems with several network interfaces, SSH Tectia Server can also be bound to a specific network interface so that the server can be only accessed from the intended network. For example, the following will bind the listener to address 10.1.60.25 using the Secure Shell default port 22:

ListenAddress 10.1.60.25